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TITLE: METHOD AND APPARATUS FOR SELF-ADJUSTABLE DESIGN 
HANDLING EVENT FLOWS 

SPECIFICATION 
Background 

1. Technical Field 

5 The present invention relates generally to data transmission in data communication 

networks, by way of example, the synchronous optical networks, (SONET networks) and 
Synchronous Digital Hierarchy networks (SDH networks) and more particularly to the control 
of alarm messages within a network to prevent the excessive generation of alarm messages 
?S from degrading network performance. 
:tio 2. Related Art 

New networks and information exchange capabilities that were unimaginable even in 
Cj recent times are being developed and implemented in a way that impacts businesses and 
O individuals in a significant way. For example, desktop computers may now be integrated with 
^ wireless radio telephones to allow the transmission of information from the computer to a 
ji5 destination by way of a land line communication network and then by way of a wfreless 
Q communication network. 

The recent explosion of the intemet is creating the capability and desire for networks of 
all types to be integrated and coupled to exchange data signals carrying varying types of 
information. In many cases, the same data will be transported through a local area network 
20 prior to being delivered to the intemet. Thus, by way of example, a digital signal can be 
transported from a source through a local area network and through the intemet to a final 
destination. Moreover, within the intemet portion itself, there may be a need to transport the 
user data through a backbone data transfer port infrastmcture, by way of example, through a 
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fiber optic ring network. The aforementioned SONET and SDH networks play a key role in 
providing a backbone data transport infrastructure. 

Generally speaking, the internet itself is in essence a collection of many large and small 
computer networks that are coupled together over high speed backbone data links such as T-1, 
5 T-3, OC-1 and OC-3. Stated differently, the internet is a network of networks. As a result of 
the creation of the internet, worldwide access may be achieved. People and their equipment 
may now communicate from most any civilized point to another in a fast and relatively 
inexpensive medium. 

In order to make communication devices created by companies throughout the world 
a 0 compatible with each other to create local area networks and worldwide networks such as the 
il= internet protocols and standards are often defined. These protocols and standards are used to 
m guide the design of the communication devices, and more specifically, to guide the design of 
% the operating logic in software within the devices. While communication devices that are 
designed in view of these standards do not always follow the suggested models exactly, they 
H 5 are usually compatible with the protocol-defined interfaces (physical and logical). 

Regarding its physical aspects, the internet is a packet switched network that is currently 
D based on a group of protocols for exchanging data. For example, a transmission control 
protocol/internet protocol (TCP/IP) is a connection-oriented protocol that first establishes 
connection between two computer systems that are to exchange data. The digital information is 
2 0 then broken into data packets having a defined format. The packets are attached to headers that 
are for containing control and address information and are transmitted through the internet and 
through the back hall infrastructures. 

Many of the common backbone data transport systems utilized include time division 
multiplexed (TDM) double ring transmission systems. Double ring TDM systems are generally 
25 known, especially for fiber optic communication networks. In order to maintain transmission 
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in the event of a fault on one of the channels of the communication links, it is typically 
common to find ring transmission systems in which transmissions occur in two directions. 
Specifically, transmissions occur in one direction through all of the nodes in the ring in a 
working path in through an opposite direction in a protection path. 
5 The protection path is, traditionally, a redundant path for transmitting signals in a failure 

condition. Examples of fiber optic TDM systems include the SONET and SDH double ring 
fiber optic communication systems used in North American and Europe, respectively. As a 
result of the internet, many types of networks that traditionally have been independent of one 
another are now being integrated so that a user of one type of device may relay messages to 
1:1 0 another type of device. 

m By way of example, networks are being integrated to allow a user of a computer to 

m generate a message that is transmitted to a recipient's cellular phone. By way of example, the 
sender might enter a message upon his computer, then use the public switch telephone network 
" to access the internet wherein the message is transmitted to a paging company that in turn 
'l[ 5 utilizes a cellular network to deliver a text message to the recipient. 

In the described example, three different networks were utilized to deliver the message. 
O The internet formed the backbone network that tied the public switched telephone network to 
the wireless network to deliver the message. Moreover, had that user been on a computer 
terminal that is part of a corporate LAN, by way of example, then the message would have had 
2 0 to be transmitted through the corporate LAN prior to being transmitted over the public switch 
telephone network and then the internet and then the wireless network. 

Because the internet and demand for internet access has exploded, the aforementioned 
data transport networks for providing a data backhauling have been developed to conduct large 
numbers of conamunication channels and large amounts of data. Fiber optic networks, in 
25 particular, are very attractive for backhauling data because they have achieved very high 
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capacity rates. One fiber optic strand alone can carry dozens of times more data than a 
traditional wire line. Because a fiber optic cable comprises a bxmdle of many such strands, the 
data throughput capacity of modem fiber optic networks is enormous. 

As these networks evolve and progress, the control of the networks is developed at 
5 many different layers or levels of abstraction. For example, the OSI model defines seven (7) 
layers of protocol for data transport and control of the same. Needless to say, the software and 
systems that are required to merely control such large amounts of data form their own networks 
that are also very sophisticated and have significant feedback mechanisms to enable precise 
control. 

13-0 For one example, an element management system may receive feedback on network 

^ conditions from up to 250 cross connect systems that are used for routing and controlling data 

flow. Each of the 250 cross connect systems, in turn, may control up to 8,000 logical 
'2 communication lines in a data pipeline network. Thus, significant amoimts of error messages 

may be generated when a problem is detected by one of the 250 cross connect devices. 
■Is More specifically, network management systems can operate under degraded conditions 

or even crash when an event occurs that causes at least one network element to generate large 
;:2 numbers of messages, alarms and other signals to the event. The results from a surge of alarms 

(hereinafter event flow) may lead to problems ranging from system degradation to actual 

system crash. What is needed therefore is a system and method for preventing an event flow 
2 0 from degrading or crashing the system or network. 
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Summary of the Invention 
To overcome the shortcomings of the prior systems and their operations, the present 
invention contemplates an apparatus and a method for limiting the number of specified 
messages placed onto a network thus to improve network performance. More specifically, in 
5 the occurrence of an event that prompts a network element to generate a large number of non- 
crhical alarms, an element management system, upon detecting that a defined threshold has 
been exceeded for specified types of messages, determines which network element is 
generating the greatest number of such messages. Thereafter, the element management system 
then instructs the network element that is generating the largest number of alarm messages to 
O 0 cease transmitting a specified type of alarm message. 

5 of example, in some cross connect network elements, there are a great number 

m of quality of service oriented signals and alarms that may be generated by the cross connect 
network element. Among these, there are 33 signals, for one particular cross connect network 
element, that specify when a defined threshold has been reached. In addition to the threshold 
%_ 5 type of quality of service signals, there are others as well. 

m Accordingly, the invention contemplates having the element management system that 

j^- instruct the cross connect network elements to suspend transmitting specific types of QoS 
threshold alarms. In an alternate embodiment of the invention, if the event flow rate is still too 
high, the element management system may instruct the cross connect network element to stop 

20 sending all threshold types of alarms. Finally, if the event flow rate is still too high, the 
element management system may cause all QoS alarms from the one network element to not be 
transmitted. Alternatively, the threshold alarms from other network elements may be muted for 
a period to reduce the overall event flow rate. For each of these scenarios, the element 
management system suspends the flow of messages for a defined period of time. For example, 

25 in one preferred embodiment, the select type of QoS signal is muted for a period of 600 
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seconds. In an alternate embodiment of the invention, a network element is allowed to start 
transmitting the suspended QoS signals if the overall alarm rate for the suspended QoS signals 
falls below a lower threshold value. In the preferred embodiment of the invention, the upper 
threshold is 10 events per second for all network elements or 1 per second for any one network 
5 element. In this alternate embodiment, the lower threshold is 3 events per second for all 
network elements. 
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Brief Description of the Drawings 

FIGURES lA and IB are functional block diagrams illustrating a plurality of data 
transport networks and a control network for controlling the data transport within the data 
transport networks according to a preferred embodiment of the invention; 

FIGURE 2 includes a curve that illustrates network operation according to one 
embodiment of the invention in terms of the rate of alarm transmissions versus time; 

FIGURE 3 is a state transition diagram illustrating two modes of operation for a cross 
connect network element within a wide area control network 100 of FIGURE 1 ; 

FIGURE 4 is a flow chart illustrating a method for controlling an event rate to avoid 
system degradation according to a preferred embodiment of the invention; 

FIGURE 5 is a flow chart illustrating the method in which the element management 
system monitors the event rate according to one embodiment of the invention; 

FIGURE 6 is a flow chart illustrating an alternate embodiment for reducing the rate of 
event flows, namely the rate of QoS alarms that are transmitted to the element management 
system; and 

FIGURE 7 is a flow chart that illustrates an alternate embodiment of an inventive 
method for reducing an event flow rate in a network. 
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Detailed Description of the Drawings 

FIGURES 1 A and IB are functional block diagrams illustrating a plurality of data 
transport networks and a control network for controlling the data flow within the data transport 
networks. Referring now to FIGURES lA and IB, a wide area control network 100 is coupled 
5 to communicate with a plurality of data transport networks 150. More specifically, a network 
management system 102 is coupled to exchange control signals with an element management 
system 104, Element management system 104 is coupled to exchange control signals and to 
receive network information from each of a plurality of cross connect network elements. For 
example, cross connect network element 106A is shown transmitting a quality of service signal 
Q 0 108 to element management system 1 04. 

Ill Element management system 104 includes a processor 104A, a store 104B and a 

m memory 104C and a transceiver port 104D. Transceiver port 104D is for enabling the element 
management system 104 to communicate with a plurality of network elements 106. For 
^ " example, in one embodiment of element management system 104, transceiver 104D is operable 
;S5 to communicate with 250 network elements 106 over a wide area network. Processor 104 A is 
:.r^ operable to execute computer instructions stored within store 104B. The computer instructions 
y 104B define the operation and operational logic of the element management system 104 
according to the present invention. For example, the computer instructions within store 104B 
define the logic to prompt one or more network elements to stop transmitting alarms as 
2 0 described herein. More particularly, the method steps described in each of the following 
figures that are performed by an element management system 104 are defined in the computer 
instructions stored within store 104B. For example, each method step relating to the logic for 
determining which alarms are to be muted and for how long is defined in store 104B. 

Each element management system 104, in the described embodiment, is capable of 
2 5 communicating with and up to 250 cross connect network elements over wide area control 
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network 100. As may be seen, therefore, the element management systems must be capable of 
communicating with many cross connect network elements at once. Should an event occur to 
cause some of the cross connect network elements 106A to generate a large number of QoS 
signals 108, the network operation may become degraded especially if there are many other 
ongoing communications. 

Each of the cross connect network elements 106 A and 106B are connected to their own 
data transport networks 150A and 150B, respectively. Each of the data transport networks 
150A and 150B shown here in FIGURES lA and IB is a dual ring SONET network. It is 
understood, of course, that the invention is not limited to any particular data transport network 
and, more specifically, to dual ring SONET networks. 

Continuing to refer to FIGURES lA and IB, cross connect network element 106A 
includes an interface port 110 for communicating with element management system 104. 
Additionally, cross connect network element 106A includes an internal bus to enable 
communications between a processor 114, a store 116, and a memory 118. Store 112 is a 
memory device, typically formed of a hard disk, that includes computer instructions that define 
the operational logic for cross connect network element 106A. Memory 118 is formed, in the 
preferred embodiment, of a disk as well. Because its purpose is for storing data on a temporary 
basis, however, other known types of memory may be used including random access memory. 
Processor 110 communicates with store 116 over internal bus 116 to obtain and execute the 
stored computer instructions. Additionally, processor 114 communicates with memory 118 
over bus 116 to place data within the memory that is to be used as part of the operations. 
Internal bus 116 also is coupled to bus interface 120 which serves to interface a large plurality 
of ports XI through Xn. Network element 106A communicates with cross connect network 
elements. 
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As stated before, one cross connect network element may control up to 8,000 virtual 
communication links. Accordingly, significant interface capabilities are required between the 
cross connect network element 106A and the data transport network 150A. 

The computer instructions stored within store 116 also define logic to create an event 
5 forwarding discriminator 122 and a plurality of managed objects. Herein FIGURES lA and 
IB, managed objects 01, 02 and 03 are shown at 124A-124C, respectively. Each managed 
object represents a specified function or grouping of computer instructions that perform a 
specified fimction. As is known by those skilled in the art, each of the managed objects 01, 02 
and 03 as well as the event forwarding discriminator (EFD) 122 are addressable as distinct 
QO devices of a network. Thus, element management system 104 is capable of transmitting 
IJi specified commands to the EFD or to the managed objects 124A-124C. 

a In operation, processor 114 interprets a command having a specified address, for 

■Q example, one that is intended for EFD 122, and then executes an algorithm that is called by or 
„^ " relates to the specified address given in the command fi*om element management system 104. 

By way of example, if element management system 104 generates a message to instruct the 
^ jj EFD to filter a specified type of quality of service signal in response to receiving too many 
y quality of service alarms, processor 114 will execute a series of computer instructions that 
achieve the effect desired by element management system 104. In the described embodiment, 
each of the managed objects send alarms to EFD 122. EFD 122 analyzes the received alarms 
2 0 and decides which alarms to forward to the network element management system 104. Thus, 
element management system 104 may generate instructions for a specified managed object such 
as managed object 124 A or for the EFD 122 to stop sending specified types of alarms. 

Store 116 also includes computer instructions to limit the transmission of specified 
types of quality of service signals or alarms under specified conditions. For example, in one 
25 embodiment, the computer instructions stored within store 116 enable the cross connect 
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network element 106 to store in memory a specified quality of service signal when so instructed 
by the element management system 104. If the cross cormect network element 106 continues to 
send too many alarms, then the logic within store 116 also is capable of muting all quality of 
service threshold alarms, and then if necessary, all alarms. In the preferred embodiment, each 
alarm that is prevented from being transmitted over a bus to element management system 104 is 
stored in memory 118 until such time that element management system 104 requests an upload 
of all stored alarms. Thus, as may be seen, store 116 also includes computer instructions that 
define logic for responding to a request to upload stored alarms. 

Continuing to refer to FIGURES lA and IB, it may be seen that the network 
management system 102 is coupled to an operator console 102a. The operator console 102a is 
for allowing an individual to interact vrith the network management system 102 to specify the 
upper and lower thresholds that trigger the state changes as defined herein. For example, an 
operator may enter, for some embodiments, just the upper threshold value that triggers a 600 
second suspension. For example, if the operator determines that the event flow rate is still 
typically too high after 600 seconds, the operator might choose to increase that value to another 
number, by way of example, 900 seconds. Altematively, if the operator determines that 600 
seconds always is enough, then she might experiment by reducing the suspension period to a 
lower number such as 300 seconds. Accordingly, the ability to specify the suspension period 
allows the system to be tuned and adjusted to a period of time that typically works well but that 
minimizes the suspension period. Alternatively, the operator console 102 may also enable then 
operator to specify the actual threshold values if the operator determines that they may be 
changed. Thus, by way of example, the upper threshold value may be set to an event flow rate 
of 30 events per second instead of 10 events per second. Thus, the selected threshold values 
and/or the selected suspension period values are transmitted in a system parameters signal 102b 
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from console 102a to network management system 102 which in turn transmits a signal 
containing the information of signal 102b to element management system 104. 

FIGURE 2 includes a curve that illustrates network operation according to one 
embodiment of the invention in terms of the quantity of alarm transmissions versus time. More 
5 specifically, FIGURE 2 illustrates an event rate flow for quality of service messages. In 
modem networks, a very large number of quality of service messages are often defined to 
enable an element management system to properly control the various networks. For example, 
there are 33 types of threshold crossing alerts that are defined for this one existing cross 
connect network element. Thus, for exemplary purposes, FIGURE 2 illustrates a curve that 

Q 0 represents the rate of the threshold crossing alerts that are received by the element management 

5 system 104 of FIGURE 1. 

pi As may be seen, referring to FIGURE 2, a curve 200 illustrates an increase and then 

decrease of the event flow rate with respect to time. Initially, curve 200 crosses a lower 
threshold 210 at point 214. Thereafter, the event rate peaks and decreases and just touches the 

% 5 lower threshold at point 216 before it begins a climb toward the upper threshold 220. The event 
curve 200 eventually crosses the upper threshold at 224 v^ile increasing in rate. Thereafter, the 

y event rate peaks and decreases to zero. Along the way, however, the event rate crosses the 
upper threshold at 228. In the preferred embodiment of the invention, the network element is 
commanded to suspend the generation of threshold crossing alerts for a period of 600 seconds 
2 0 once the curve crosses threshold 220 at point 224. As may be seen from referring to FIGURE 
2, as the event flow rate continues to zero, it crosses the lower threshold 210 at point 218. 

In an alternate embodiment of the invention, the crossing of the lower threshold 210 
prompts the element management system to generate a message to the cross connect network 
element 106 that is in a suspended mode of operation to transition back to a normal mode of 

25 operation. In the example herein, the upper threshold is defined as ten events per second while 
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the lower threshold is defined to be three events per second from all of the network elements. It 
is to be understood that these threshold definitions may readily be varied. 

FIGURE 3 is a state transition diagram illustrating two modes of operation for a cross 
connect network element within a wide area control network 100 of FIGURE 1. In a normal 

5 mode of operation, namely state 3 10, a cross connect network element generates and transmits 
event information to element management system 104 whenever a specified event is realized. 
For example, among the hundreds of different types of alarms and messages that may be 
generated, any one of a large group of quality service messages may be transmitted. Moreover, 
even within the group of quality of service messages, there are 33 different types of threshold 

0 crossing alerts for an existing and known type of cross connect network element. Thus, in the 
normal mode of operation 310, the cross connect network element 106 continues to generate all 
33 types of threshold crossing alerts as necessary. 

If, on the other hand, a transition event occurs, namely that a certain event flow rate 
from the cross connect network elements to the element management systems 104 has been 

5 exceeded (event 330), then the cross connect network element that is transmitting the greatest 
number of the specified alarms is suspended for a period of time from generating more alarms. 
At this point, the system transitions to state 320. 

For example, in the preferred embodiment, if a cross connect network element 106 A is 
generating the greatest number of threshold crossing alerts in comparison to all other cross 

0 connect network elements, and if the number of threshold crossing alerts received by element 
management system 104 exceeds 10 per second from the entire group of cross connect network 
elements, then the offending cross connect network element 106 is placed into a suspended 
mode of operation, or state 320. In alternate embodiments of the invention, different types of 
quality of service messages at different rates or different types of alarms at different rates may 

5 be used herein. 
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Once a cross connect network element is placed into a suspended mode of operation, or 
state 320, it is no longer allowed to generate a specified type of alarm for a specified period. 
Rather, the cross connect network element stores the specified type of alarm into memory for 
uploading at a latter time. By way of example, our cross connect network element 106A might 
5 be prevented from generating and transmitting all 33 types of threshold crossing alerts for a 
period of 600 seconds. 

In the preferred embodiment of the invention, a cross connect network element, or state 
320 only exits the suspended mode of operation 320 when 600 seconds have expired. Thus, 
event 350, which is the expiration of the 600 seconds, causes the cross connect network element 
WO to transition from a suspended mode of operation, or state 320, to a normal mode of operation, 
ill or state 310. Thus, event 340 of FIGURE 3 merely illustrates that the cross connect network 
m element 106A stays within the suspended mode of operation 320 while it has been less than 600 
.p seconds since it entered that mode of operation. 

In an alternate embodiment of the invention, cross connect network element may 
transition from the suspended mode of operation, or state 320, to normal mode of operation, or 
state 310, when the event flow rate reaches or exceeds the lower threshold illustrated in 
y FIGURE 2. By way of example, if the number of threshold crossing alerts from the entire 
network drops or reaches an event flow rate of 3 per second, the cross connect network element 
106A transitions to the normal mode of operation 310 (event 360). 
2 0 It is to be understood that the upper and lower thresholds that trigger the changes in 

modes of operation from the normal mode of operation 310 to the suspended mode of operation 
320 may be varied. 

FIGURE 4 is a flow chart illustrating a method for controlling an event rate to avoid 
system degradation according to a preferred embodiment of the invention. Referring now to 
25 FIGURE 4, the element management system 104 monitors the event rate from all of the cross 
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connect network elements (step 404). While monitoring the event rate, the element 
management system 104 determines whenever the event rate is greater than or equal to a fixed 
nitmber for a fixed period of time. In the preferred embodiment, the element management 
system determines when the event rate is greater than or equal to 10 per second from all of the 
5 network elements or 1 per second from any one network element (step 408). 

Once the element management system determines that the event rate has reached or 
exceeded 10 per second from all of the network elements or 1 per second for any one network 
element, it suspends the alarms for the event type for a fixed period of time (step 412). In the 
preferred embodiment of the invention, the element management system suspends the alarms 
0 that relate to the specified event type for a period of 600 seconds by transmitting a signal to 
EFD 122 to prompt it to "change filters" so as to fiher specified types of alarms. In an ahernate 
embodiment, a command is sent to merely restrict the flow of a specified alarm. The element 
management system then determines when 600 seconds has expired (step 416) and allows the 
cross connect network element that was instructed to cease transmitting specified alarm types to 
5 transition to a normal mode of operation where alarms for the event type are allowed (step 420). 
Once the system is operating in a normal mode of operation, including the cross connect 
network element tliat previously was in a suspended mode of operation, the element 
management system uploads all alarms that were stored during the suspension period (step 
424). 

0 FIGURE 5 is a flow chart illustrating the method in which the element management 

system monitors the event rate according to one embodiment of the invention. First, the 
element management system, by way of example, element management system 104 of 
FIGURE 1, creates a QoS log of events (step 502). In the preferred embodiment, the event log 
includes quality of service parameters and more specifically, threshold crossing alerts. Thus, as 
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the specified threshold crossing alerts (quality of service alarms) are received, they are placed 
into the log created in step 502 (step 504). 

In addition to logging the alarm by type, the element management system also records a 
time value that corresponds to each logged alarm (step 506). The time value allows, at a 
5 minimum, the element management system to determine the relative difference in time of 
alarms. Thus, in one embodiment, the time value is merely a numerical value representing the 
amount of time that has elapsed since the last logged entry was made. In an alternate 
embodiment, the time value reflects the actual system time that the alarm was received. The 
purpose of storing time values is to enable the element management system to determine an 
fflO event flow rate. 

W The number of stored events is monitored until it is determined that approximately 1000 

IB have been recorded (step 508). Once the element management system has recorded 1000 
if] entries in the log, it determines the event flow rate for the last events (step 5 1 0). 

Thereafter, after each alarm is received, once a total of 1000 entries have been placed 
^iS into the log, the element management system recalculates the event flow rate as a part of 

monitoring it as described in step 404 and determining when the event rate has reached a 
y specified threshold (step 512). 

FIGURE 6 is a flow chart illustrating an alternate embodiment for reducing the rate of 

event flows, namely the rate of QoS alarms that are transmitted to the element management 
2 0 system. The method disclosed in FIGURE 6 is a method performed in a cross connect network 

element. First, the cross connect network element receives an indication that the element 

management system is receiving an excessive number of alarms (step 605). 

Typically, a message is received from the element management system indicating that 

the message flow rate is too high. In the preferred embodiment of the invention, a signal 
2 5 named "off Threshold_Alarms" is used to indicate that the alarm flow rate is too high and that 
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the cross connect network element is to go into a suspended mode of operation. In this 
alternate embodiment of Figure 6, however, the cross connect network element responds 
differently to the specified signal. First, it builds a list of alarms instead of transmitting them 
(step 610). This step also exists in all preferred embodiments of the invention. Thereafter, the 
5 cross connect network element periodically counts the alarms by type that are within the list 
(step 615). Then, on occasion, the cross connect network element transmits an alarm inventory 
report to the element management system (step 620). For example, in one embodiment, the 
cross connect network element may be programmed to transmit the alarm inventory report once 
every second. 

^0 FIGURE 7 is a flow chart that illustrates an alternate embodiment of an inventive 

5 method ibr reducing an event flow rate in a network. Once the element management system 

ffl determines that an event flow rate has surpassed a defined threshold, it examines a log of 
received alarms to determine the most common specific type of alarm. Thereafter, it instructs 
the cross connect network element transmitting the greatest number of the specified alarms to 

Jls stop transmitting that particular alarm (step 704). If the event flow rate continues to be too 
high, the element management system will generate a message to prompt the cross connect 

■i network element to stop sending that category of alarm (step 708). For example, if the 
specified type of alarm which was silenced in step 704 was one of the 33 types of threshold 
alarms, then the category of alarms, namely the threshold alarms, are muted from the one cross 

2 0 connect network element in step 708. 

If the event flow rate from that particular cross connect network element is still too 
high, then the element management system instructs the offending cross connect network 
element to mute all QoS types of alarms (step 712). Finally, if the event flow rate is still too 
high, the element management system 104 commands the offending cross connect network 

25 element to stop generating alarms at all (step 716). As may be seen, a method illustrated in 

18 



LDN 1094-00 
ADN 135614 

FIGURE 7 provides for a graduated set of responses according to the numbers and types of 
alarms being generated by the cross connect network element that has the excessively high 
event flow. 

The method of FIGURE 7 may be modified in other ways as well For example, after 
5 step 708 in which specified types of QoS alarms are muted, the element management system 
can instruct the cross connect network element generating the second highest number of event 
flows to stop transmitting either a specified alarm or a specified type of alarm, for example, the 
threshold alarms, prior to taking the more drastic step of instructing the first cross connect 
network element to mute all quality of service alarms. Other variations to reduce the overall 
QO event flow rate to the element management system from each of the cross connect network 
ill elements 106 of FIGURE 1 may be implemented. 

ig The disclosed invention is particularly advantageous in that it allows an element 

^fl management system to mute or partially mute a network element that is generating large 
numbers of non-critical alarms. Thus, the network's operation is not degraded and threatened 

";I5 with a major failure based on excessive traffic congestion due to the large number of alarms 
that may be generated as a result of a particular event. 

M While the invention is susceptible to various modifications and alternative forms, 

specific embodiments thereof have been shown by way of example in the drawings and detailed 
description. It should be understood, however, that the drawings and detailed description 

20 thereto are not intended to limit the invention to the particular form disclosed, but on the 
contrary, the invention is to cover all modifications, equivalents and altematives falling within 
the spirit and scope of the present invention as defined by the claims. As may be seen, the 
described embodiments may be modified in many different ways without departing from the 
scope or teachings of the invention. 
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Claims: 

1 . A method for managing a plurality of network elements, comprising: 

3 receiving a plurality of quality of service (QoS) alarms from the plurality of alarms; 

4 determining an event flow rate wherein an event flow rate is the rate that a specific type 

5 of alarm is received; 

6 determining which of the plurality of network elements is generating the greatest 

7 number alarms; and 

8 instructing the network element generating the greatest number of alarms to stop 

9 sending the alarms. 

1 2. The method of claim 1 wherein the network element does not transmit the 

2 specified types of alarms for a period of 600 seconds. 

1 3. The method of claim 1 wherein only a specific threshold alarm not transmitted 

2 for the period, 

3 

1 4. The method of claim 1 where a type of alarm is not transmitted for the period. 

1 5. The method of claim 4 wherein the type is the threshold types of alarms. 

1 6. The method of claim 4 wherein the type is the QoS types of alarms. 
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1 7. The method of claim 1 wherein a network element that has been suspended from 

2 transmitting alarms is allowed to start re-transmitting the suspended type of alarm if the event 

3 flow has dropped below a lower threshold value. 

1 8. The method of claim 7 wherein the lower threshold value is equal to 3 . 

1 9. An element management system, comprising: 

2 a processor; 

3 a store for storing computer instructions that define operational logic of the element 

4 management system, the computer instructions for prompting the element management system 

5 to issue a signal to a network element to cause it to stop sending QoS signals. 

1 10. The element management system of claim 9 wherein the computer instructions 

2 prompt the processor to send a signal to the network element to instruct it to stop sending only 

3 a specific type of threshold crossing alarm. 

1 11. The element management system of claim 9 wherein the computer instructions 

2 prompt the processor to send a signal to the network element to instruct it to stop sending all 

3 threshold crossing alerts. 

1 12. The element management system of claim 9 wherein the computer instructions 

2 prompt the processor to send a signal to the network element to instruct it to stop sending all 

3 QoS alarms. 
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1 13. The element management system of claim 9 wherein the computer instructions 

2 prompt the processor to send a plurality of signals to the network element to instruct it to stop 

3 sending alarms, wherein the instructions to stop transmitting are, in the following order: 

4 specified types of threshold alarms; 

5 all threshold alarms; 

6 all QoS alarms; and 

7 all alarms. 



1 14. The element management system of claim 9 wherein the computer instructions 

2 prompt the processor to send a plurality of signals to the network element to instruct it to stop 

3 sending alarms, wherein instructions prompt the element management system to instruct a 

4 second network element to stop sending threshold crossing alerts prior to sending an instruction 

5 to stop transmitting all QoS alarms. 
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Abstract 

The present invention contemplates an apparatus and a method for limiting the number 
of specified messages placed onto a network thus to improve network performance. An 
element management system, upon detecting that a defined threshold has been exceeded for 
specified types of messages, determines which network element is generating the greatest 
number of such messages. Thereafter, the element management system instructs the network 
element that is generating the largest number of alarm messages to cease transmitting a 
specified type of alarm message. In an altemate embodiment of the invention, if the event flow 
rate is still too high, the element management system may instruct the cross connect network 
element to stop sending all threshold types of alarms. Finally, if the event flow rate is still too 
high, the element management system may cause all QoS alarms from the one network element 
to not be transmitted. Altematively, the threshold alarms firom other network elements may be 
muted for a period to reduce the overall event flow rate. For each embodiment, the element 
management system suspends the flow of messages for a defined period of time. For example, 
in one preferred embodiment, the select type of QoS signal is muted for a period of 600 
seconds. In an altemate embodiment of the invention, a network element is allowed to start 
transmitting the suspended QoS signals if the overall alarm rate for the suspended QoS signals 
falls below a lower threshold value. 
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